Can't you add machine accounts to the autheticated users on the ISA server? Or better yet, use Domain Computers group. That would allow access for all system accounts on all computers.